Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143907.roa
File:                     AS143907.roa (raw, json)
Hash identifier:          rbvBzFzmtyX622smq7+peGTGs/HU4qqyv3leXcBf5Mg=
Subject key identifier:   D2:36:E1:90:F4:8D:26:A3:AA:11:BA:00:33:96:6E:D5:89:0E:FA:5A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       46B8643463FCEAAA5743D01BD320921CBF968E31
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143907.roa
Signing time:             Fri 22 May 2026 01:50:22 +0000
ROA not before:           Fri 22 May 2026 01:45:22 +0000
ROA not after:            Fri 21 May 2027 01:50:22 +0000
asID:                     143907
IP address blocks:        240a:a4e9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:64:34:63:fc:ea:aa:57:43:d0:1b:d3:20:92:1c:bf:96:8e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:22 2026 GMT
            Not After : May 21 01:50:22 2027 GMT
        Subject: CN=D236E190F48D26A3AA11BA0033966ED5890EFA5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ae:58:1b:fc:15:ac:7a:5b:ab:4e:7e:92:88:
                    e5:1e:1e:ac:5a:c0:f4:3a:49:0c:84:df:71:b7:69:
                    ce:b3:4f:0c:ed:74:50:a1:aa:cf:51:42:60:c8:54:
                    a8:48:73:5e:e7:54:fb:b1:d0:e6:c2:81:c6:59:18:
                    32:df:b2:62:ba:9b:67:e8:52:17:5f:98:0f:36:ac:
                    8e:cd:24:07:f7:c0:0e:4c:1c:54:fb:69:4f:5a:95:
                    32:8e:3b:f1:24:64:72:bf:02:25:d5:41:09:70:58:
                    4e:0e:8f:5e:d1:8f:6f:96:22:ed:ad:d8:a5:76:f3:
                    44:a3:a0:0c:da:8d:47:91:0f:ad:fb:6a:b1:ad:2a:
                    cd:9d:2f:c6:c5:3d:3e:1c:24:e1:19:b8:49:21:00:
                    18:7d:96:ea:41:94:d7:61:2b:11:a5:c8:01:04:92:
                    99:bc:cd:d5:57:f6:9b:36:dd:68:65:23:e1:bc:b4:
                    94:42:1c:1f:c5:bc:18:00:43:ca:2f:fd:f8:c8:4b:
                    3b:8c:79:42:1a:ff:80:ca:74:72:15:95:1e:7d:28:
                    6f:98:c0:98:45:36:98:9d:26:a7:6a:33:cc:b5:71:
                    9f:26:eb:2a:ac:91:7d:2d:b7:a1:c5:00:10:09:31:
                    fc:c4:d0:1f:82:c9:c9:12:8b:92:09:45:7a:4c:67:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:36:E1:90:F4:8D:26:A3:AA:11:BA:00:33:96:6E:D5:89:0E:FA:5A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143907.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4e9::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:53:01:17:57:54:18:f0:af:31:3e:dd:40:40:60:b8:9e:
         a8:98:65:63:43:10:b1:9c:51:e9:37:aa:07:9b:c6:2c:dc:b9:
         d1:9e:dd:59:eb:8a:2f:c0:2c:79:ae:d1:d6:d0:32:1a:b5:1e:
         4c:ce:65:05:8b:c6:84:f1:bc:53:ba:21:da:8e:ee:64:98:40:
         1d:54:e2:05:eb:12:64:2d:63:95:62:75:74:7c:cb:aa:7f:78:
         8a:3f:56:9c:f2:4d:0f:10:f6:4f:89:11:01:d8:1f:d7:70:bc:
         f8:f4:e4:9b:76:c5:68:e9:7c:30:a4:87:3a:3e:bf:8e:a5:51:
         9e:d0:52:b9:f0:0c:36:80:74:b7:2b:34:08:42:0f:fd:cf:0e:
         7b:24:c8:10:1a:89:9f:8d:4d:94:76:c1:05:30:e3:8d:e8:0b:
         89:fb:cd:46:4d:07:bc:d4:b4:4c:1c:f8:3d:c1:fb:3f:b6:8a:
         34:b3:0a:ae:04:92:0f:6a:e2:b3:3d:0f:dc:37:cd:6b:0d:75:
         ab:e0:bc:ef:60:0a:9c:de:70:ff:75:88:e3:a7:bb:71:c7:ff:
         a5:ee:99:e7:31:77:7d:9d:f4:70:bf:bc:52:4d:d4:3b:c7:e2:
         39:4f:24:32:eb:b9:44:25:ec:93:c3:8f:da:30:7d:64:e1:f1:
         06:3b:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----